37.2.108.253 has a moderate threat confidence level of 54%, originating from Stockholm, Sweden, on the Tele2 SWIPnet network (1257). It has been observed across 226 sessions targeting SSH, First observed on January 21, 2026, most recently active March 6, 2026.